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DETAILED ACTION 

I. Claims 17-21 were cancelled in a preliminary amendment. 

II. Claims 22-24 were added in a preliminary amendment. 

III. Claims 1-16 and 22-24 have been examined. 

Claim Rejections - 35 USC §112 
The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification sliall conclude witli one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

1 . Claim 5 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. The term "substantially" in claim 5 is a relative term which 
renders the claim indefinite. The term "substantially" is not defined by the claim, the 
specification does not provide a standard for ascertaining the requisite degree, and one 
of ordinary skill in the art would not be reasonably apprised of the scope of the 
invention. 

Claim Objections 

2. Claims 1 , 22, 23 and 24 objected to because of the following informalities: There 
are parentheses around the word "covert" within each of these claims. Appropriate 
correction is required. 

Claim Rejections - 35 USC § 102 

(e) the invention was described in (1 ) an application for patent, published under section 1 22(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
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only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

Claims 1, 2, 4, 5, 9, 10, 14, 16 and 22-24 are rejected under 35 U.S.C. 102(e) as 
being anticipated by United States Patent Application Publication No. US 2003/0145017 
to Patton et al., hereinafter Patton. 

3. Regarding claims 1 , 22, 23 and 24, Patton teaches a method, an apparatus, a 
computer chipset and a computer readable medium having program code record 
thereon for communicating an electronic document between security domains, the 
method comprising the steps of: 

receiving, In a first security domain (page 3, paragraph 29, "internal source" and "United 
States"), a request to transmit to a second security domain (page 3, paragraph 29, 
"external sources" and "out of the United States or to foreign persons, whether In the 
United States or abroad") a first electronic document in a first data format capable of 
supporting one or more covert security threats (page 3, paragraph 29); 

creating a second document in a second data format Incapable of supporting the 
one or more security threats, responsive to the content of the first document (page 3, 
paragraph 30, "remove restricted information, technical data and proprietary information 
from a master document" and paragraph 32, page 4, paragraph 37, "the draft DP 108 is 
In a word processing file format such as Microsoft Word, Corel WordPerfect or any other 
suitable word processing format. The draft DP 108 can be converted using the 
sanitization application and the process described in greater detail below, to a 
'sanitized' draft DP 1 10 and a 'sanitized' draft DP log 112." and paragraph 39, "issued 
DP 1 14 is preferably converted into a HTML format or a read-only, portable file format. 
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e.g. PDF" and page 5, paragraph 47, "the author 102 can also perform character or text 
searches, which are described in steps 318-320, on the 'sanitized' draft DP 1 10 in its 
portable or read-only format, e.g. in its PDF format, rather than on the draft DP 108 in its 
word processing format, e.g. in its Word format"); 

forwarding the second document in place of the first document to the second 
security domain (page 3, paragraph 31, "After making a determination to provide 
specific content included within the log file to an external or global source and taking 
some additional steps to ensure that appropriate security and authorization procedures 
have been followed, the specific content included within the log file can be transferred to 
the external or global source following the more restrictive U.S. Government export 
control license or company or organizational legal arrangements"). 

4. Regarding claim 2, Patton teaches in which forwarding of the second document 
is conditional upon user sanction (page 4, paragraph 39, "Once the draft DP 108, the 
sanitized draft DP 1 10 and the sanitized draft DP log 1 12 have been approved by 
approvers 106, the draft DP 108 is then converted into an issued DP 1 14 that operates 
as a master document, a global export issued DP log 1 16 and a global export issued 
DP 118."). 

5. Regarding claim 4, Patton teaches in which the second document is forwarded to 
the second security domain via at least one data diode (page 3, paragraph 31 and page 
4, paragraph 40). 

6. Regarding claim 5, Patton teaches in which the step of creating the second 
document comprises performing a transformation to the first document which modifies 
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the underlying data format of tlie document whilst substantially preserving the visible 
informational content (page 4, paragraph 39, "issued DP 1 14 is preferably converted 
into a HTML format or a read-only, portable file format, e.g. PDF" and page 5, 
paragraph 47, "the author 102 can also perform character or text searches, which are 
described in steps 318-320, on the 'sanitized' draft DP 1 10 in its portable or read-only 
format, e.g. in its PDF format, rather than on the draft DP 108 In its word processing 
format, e.g. in its Word format"). 

7. Regarding claim 9, Patton teaches comprising the step of: conveying the second 
document to a user sanction function for review and sanction prior to sending the 
second document to the second security domain (page 3, paragraph 31 , "The log file 
can be viewed by authorized internal users to confirm what information has been 
removed from the document or to determine if specific contents of the log file can be 
provided to an external source under more restrictive export control licenses or 
appropriate legal arrangements."). 

8. Regarding claim 10, Patton teaches in which review and sanction comprises 
sanction by a human user (page 3, paragraph 35, "In other words, the sanitization 
application can be downloaded to the authorized user's computer from another 
computer over a network connection or an Internet connection and can then be 
operated without the network connection. The user is able to use the sanitization 
application without a network connection and is able to store the master documents, 
sanitized documents, document log files and related information and documents in a 
database." and page 4, remainder of paragraph 35 and paragraph 39, "The draft DP 
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108, the sanitized draft DP 1 10 and the sanitized DP log 112 can be reviewed by 
reviewers 104, which can include author 102, and then approved by approvers 106, 
which can include author 102 and reviewers 104). 

9. Regarding claim 14, Patton teaches in which the first security domain and 
second security domain are rated at different security levels (page 3, paragraphs 29-31 , 
"the master document, when viewed by internal or company users, is identical to the 
original or master document, except that the information designated for removal from 
the original or master document is distinguished from the remaining text and/or 
graphics. In contrast, when viewed by an external or global source, the sanitized 
document does not include any information designated for removal from the original or 
master document"). 

10. Regarding claim 16, Patton teaches in which the first security domain is a higher- 
level security domain than the second security domain (page 3, paragraph 29, "internal 
source" and "United States", "external sources" and "out of the United States or to 
foreign persons, whether in the United States or abroad" and paragraph 31). 

[Wherein the claimed "first security domain" is interpreted by the Examiner 
to pertain to Patton's disclosure of an "internal source" and "the United 
States" with regards to certain information not being able to be sent 
outside of the United States. The claimed "second security domain" 
pertains to Patton's disclosure of "external sources" and to areas "out of 
the United States". ] 

Claim Rejections - 35 USC § 103 
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The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

1 1 . Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over Fatten as 
applied to claim 1 above, and further in view of United States Patent No. 5,787,175 to 
Carter, hereinafter Carter. 

12. Patton significantly teaches the claimed invention, as cited above. However, 
Patton does not substantially teach the claim language within claim 3 pertaining to "in 
which the second document is digitally signed by a sanctioning user". Carter teaches 
said claim language, as cited below. 

13. Regarding claim 3, Carter teaches in which the second document is digitally 

signed by a sanctioning user (column 17, lines 28-47, "Collaborative signatures control 
the attribution of a given version of the work group document 90 to one or more 
members of the collaborative group"). 
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14. The motivation to combine would be "to provide sucli a metliod and apparatus 
which limit access to work group documents to those people who are expected to 
contribute directly to the document" (Carter - column 5, lines 25-28). 

1 5. Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to incorporate the teachings of Carter with the teachings of 
Patton "to provide such a method and apparatus which permit any given member of the 
work group to independently change the cryptographic method used for key generation 
in order to foil unauthorized decryption attempts, without preventing authorized access 
to the document" {Carter- column 5, lines 62-67). 

16. Claims 6, 7 and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Patton as applied to claim 1 above, and further in view of United States Patent No. 
United States Patent No. 7,624,277 to Simard et al., hereinafter Simard. 

17. Patton significantly teaches the claimed invention, as cited above. However, 
Patton does not substantially teach the claim language pertaining to "in which the step 
of creating the second document comprises adding at least one of entropy and 
randomness to at least one characteristic of the representation of the first document". 
Simard teaches said claim language, as cited below. 

18. Regarding claim 6, Simard teaches in which the step of creating the second 
document comprises adding at least one of entropy and randomness to at least one 
characteristic of the representation of the first document (column 6, lines 3-1 1 , 
"generate a random character string image" and column 7, lines 36-52, "generates each 
image using a random set of characters"). 
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1 9. The motivation to combine to prevent "a script from successfully running a 
repetitive task that is supposed to be performed by a human" (S/marc/- column 3, lines 
5-7). 

20. Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to incorporate the teachings of Simard with the teachings 
of Patton to provide a methodology that "yields significant reductions in spam, software 
piracy, and operating costs and yields significant improvements in security" {Simard - 
column 3, lines 18-20). 

21 . Regarding claim 7, Patton teaches in which the at least one characteristic 
comprises at least one of colour and spacing (page 6, paragraph 52, "the collapsing of 
any spaces" and paragraph 55 and page 7, remainder of paragraph 57). 

[Though Patton teaches the claim language of claim 7, by virtue of its 
dependency upon claim 6 it is rejected under 35 U.S.C. 103(a).] 

22. Patton significantly teaches the claimed invention, as cited above. However, 
Patton does not substantially teach the claim language pertaining to "in which the step 
of creating the second document comprises applying a lossy compression method". 
Simard teaches said claim language, as cited below. 

23. Regarding claim 8, Simard teaches in which the step of creating the second 
document comprises applying a lossy compression method (column 12, lines 29-34). 

24. The motivation to combine would be "because the lossy compression yields even 
smaller images and additional security" {Simard - column 12, lines 31-34). 
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25. Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to incorporate the teachings of Simard with the teachings 
of Patton to render the data in a manner "that a human can easily read but that is hard 
for a computer to read" (S/marc/- column 12, lines 45-57). 

26. Claims 11-13 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Patto, as applied to claim 1 above, and further in view of United States Patent No. 
5,956,481 to Walsh et al., hereinafter Walsh. 

27. Patton significantly teaches the claimed invention, as cited above. However, 
Patton does not substantially teach the claim language pertaining to the presence of 
"malicious code". Walsh teaches said language, as cited below. The same motivation 
and obviousness to combine will pertain to each of claims 11,12 and 1 3. 

28. Regarding claim 1 1 , Walsh teaches in which the one or more security threats 
comprise presence in the first document of malicious code (Figure 2, elements 204 and 
208, Figure 3, elements 302 and 304, Figure 4C and Figure 5B, column 7, lines 3-10, 
column 9, lines 13-52, "Once the computer is infected with the macro virus, each 
computer file that you save is automatically infected with the macro virus" and "A macro 
virus uses the macro programming language of an executable program to distribute the 
macro virus to data files on a computer system"). 

29. Regarding claim 12, Walsh teaches in which the malicious code comprises at 
least one of a computer virus and a Trojan horse (Figure 2, elements 204 and 208, 
Figure 3, elements 302 and 304, Figure 4C and Figure 5B, column 7, lines 3-10, column 
9, lines 13-52, "Once the computer is infected with the macro virus, each computer file 
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that you save is automatically infected with the macro virus" and "A macro virus uses 
the macro programming language of an executable program to distribute the macro 
virus to data files on a computer system", column 10, lines 7-34, column 11, lines 16-28, 
column 12, lines 26-37 and 53-65). 

30. Regarding claim 13, Walsh teaches in which the one or more security threats 
comprises data steganographically concealed within the first document (column 2, lines 
4-6, "macro virus could attack a document by inserting a copy of itself into the data file" 
and column 9, lines 13-52, "Once the computer is infected with the macro virus, each 
computer file that you save is automatically infected with the macro virus" and "A macro 
virus uses the macro programming language of an executable program to distribute the 
macro virus to data files on a computer system"). 

31 . The motivation to combine would be to provide "a system for protecting a 
computer from infection by a virus that attacks data files of an executable program" 
{Walsh - column 2, lines 62-64). 

32. Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to incorporate the teachings of Walsh with the teachings of 
Patton in order to "protect against an unauthorized loading of a virus component, such 
as macro code, that can result in damage to data file content and to computer storage" 
(Walsh - column 2, lines 65-67 and column 3, lines 1-4). 

33. Claim 15 is rejected under 35 U.S.C. 103(a) as being unpatentable over Patton 
as applied to claim 1 above, and further in view of United States Patent No. 6,304,973 
to Williams, hereinafter Williams. 
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34. Patton significantly teaches the claimed invention, as cited above. However, 
Patton does not substantially teach the claim language pertaining to "the first security 
domain is a lower-level security domain than the second security domain". Williams 
teaches said claim language, as cited below. 

35. Regarding claim 15, Williams teaches in which the first security domain is a 
lower-level security domain than the second security domain (Figure 6, column 13, lines 
10-21, "a Multi-Level Secure computer that is capable of simultaneously processing a 
range of Secret to Top Secret" and lines 25-37 and column 14, lines 7-9). 

36. The motivation to combine would be "to provide a security device that prevents 
unauthorized third parties from gaining access to a host. It is another object of the 
invention to provide a multi-level secure network having a security device coupled 
between each host and the network medium" {Williams - column 4, lines 31-35). 

37. Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to incorporate the teachings of Williams with the teachings 
of Patton so that the "network prevents unauthorized users from gaining access to 
sensitive information" {Williams - column 4, lines 41 and 42). 
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Conclusion 

38. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

39. The following United States Patents are cited to further show the state of the art 
with respect to secure distribution of messages within a network environment: 

United States Patent No. 7,130,885 to Chandra et al., which is cited to show 
methods and apparatus providing electronic messages that are linked and aggregated. 

United States Patent No. 6,216,231 to Stubblebine, which is cited to show 
specifying security protocols and policy constraints in distributed systems. 

40. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JEREMIAH AVERY whose telephone number is 
(571)272-8627. The examiner can normally be reached on Monday thru Friday 8:30am- 
5pm. 

41 . If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Korzuch can be reached on (571) 272-7589. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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42. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Jeremiah Avery/ 
Examiner, Art Unit 2431 
/Syed Zia/ 

Primary Examiner, Art Unit 2431 



